Hello,
My issue is pretty much similar, described in these threads :
I tried the following two solutions as suggested :
#1 >> Setting the preference fiddler.network.https.SetCNFromSNI to true.
But it's not full-proof, as some clients/apps doesn't send SNI.
#2 >> adding this inside OnBeforeRequest function :
if (oSession.HTTPMethodIs("CONNECT")) {
oSession["X-UseCertCNFromServer"] = "AndroidTesting";
oSession["X-IgnoreCertCNMismatch"] = "ImplicitlyTrustingServerCN";
}
But it also has some limitations. The only time it works is when the server sends a certificate that has the subject CN same as requested domain/hostname. But if requested hostname is in the ServerAltName (in server cert), then the fiddler generated cert doesn't work.
So I was wondering, Is it not possible to add all SANs to the fiddler generated cert? IMO, it should be the preferred behavior, as fiddler is getting original certificate from the server first, so it should have all the cert info available beforehand, right??
Thanks!